Privacy policy

Who we are

Packhorse Kft. (Fürj u. 2, 1124 Budapest, Hungary) is the controller of the personal data described on this page. You can contact us about it at privacy@mypackhorse.com or by post at that address.

What we store

When you join the waitlist, we store:

• your email address;
• whether you want to carry parcels (as a Rider) or send them (as a Sender);
• if you’ll carry them, how you usually travel (car, train or bus); if you’ll send them, whether it’s for a business; and the route you’re interested in;
• the language of the page you signed up on, so we can write to you in it;
• how you found us: the referring website and any campaign tags in the link you followed;
• a record of your consent: the text shown next to the button, its version and the time;
• when you confirm your address or unsubscribe;
• a salted hash of your IP address and your browser’s user agent, to prevent abuse. We never store your IP address itself.

Giving us your details is voluntary, but we can’t add you to the waitlist without your email address.

Why we use it

We use your details to tell you when the Budapest ⇄ Vienna pilot opens, to send you updates about the pilot, and to understand demand for it (for example, how many people travel by train, or how many want to send parcels). We only email you about the Packhorse pilot. Our legal basis is your consent (Article 6(1)(a) GDPR).

We use the IP hash and user agent to stop spam and abuse of the signup form, which is our legitimate interest (Article 6(1)(f) GDPR). We keep the record of your consent because the GDPR requires us to be able to show it (Articles 6(1)(c) and 7(1) GDPR). We don’t use your details for automated decisions or profiling.

Who processes it

Your details are stored in our database in the EU (Frankfurt, Germany). These providers process data for us, only on our instructions:

• Vercel, which hosts this website;
• Supabase, which hosts our database;
• Resend, which delivers our emails.

All three are US companies, so your details may be transferred to or accessed from the United States. These transfers are covered by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

We don’t sell your details or share them with anyone else.

How long we keep it

We keep your details until 24 months after the pilot ends, then delete them. If you unsubscribe, we stop emailing you straight away, and you can ask us to delete your details at any time.

Your rights

You can ask us for a copy of your data, to correct or delete it, to restrict or object to how we use it, or to receive it in a portable format. You can withdraw your consent at any time with the unsubscribe link in our emails or by contacting us; this doesn’t affect anything we did before. You also have the right to complain to the Hungarian data protection authority (NAIH, naih.hu) or to the data protection authority in the EU country where you live or work.

Cookies

This website doesn’t use tracking cookies or third-party tracking. The only cookies are on our staff login: if you use it, we set cookies that are needed to sign you in and keep you signed in, and we remove them when you sign out.